2033 matches found
Code injection
Unspecified vulnerability in the Solaris component in Oracle Solaris 9 and 10, and OpenSolaris, allows local users to affect availability via unknown vectors related to Kernel/Disk Driver...
Design/Logic Flaw
Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality and integrity via unknown vectors related to Solaris Zones...
Oracle Solaris su NULL Pointer
From http://cvs.opensolaris.org/source/xref/onnv/onnv-gate/usr/src/cmd/su/su.c 521 for j = 0; initenvj != 0; j++ 1 522 if initvar = getenvinitenvj 2 ... 535 else 536 var = char 537 mallocstrleninitenvj 3 538 + strleninitvar 539 + 2; 540 void strcpyvar, initenvj; 4 'su' when creating new environme...
CVE-2010-3516
CVE-2010-3516 pertains to Oracle Solaris/OpenSolaris uDAPL/InfiniBand. The vulnerability is local to the system (local user required) and can affect availability via InfiniBand-related vectors. Connected docs confirm a Solaris InfiniBand issue (uDAPL) with local access and no remote exploitation ...
CVE-2010-3509
CVE-2010-3509 corresponds to a Solaris rpc.cmsd vulnerability diagnosed as an integer overflow in the rpc.cmsd service on Solaris 8/9/10. The issue allows a remote attacker to trigger a crash or execute arbitrary code with root privileges by sending a crafted RPC request, potentially leading to d...
CVE-2010-3517
Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability, related to Kernel/X86...
CVE-2010-3513
Unspecified vulnerability in Oracle Solaris 9 and 10, and OpenSolaris, allows local users to affect integrity and availability via unknown vectors related to Device Drivers...
CVE-2010-3517
CVE-2010-3517 is described as an unspecified local vulnerability affecting Oracle Solaris 10 and OpenSolaris, related to the kernel on x86. The connected documents confirm the vulnerability is located in the Solaris kernel/X86 component and is locally exploitable with the goal of impacting availa...
CVE-2010-3516
Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability via unknown vectors related to InfiniBand...
CVE-2010-3508
Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality and integrity via unknown vectors related to Solaris Zones...
CVE-2010-3509
Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Scheduler...
CVE-2010-3503
Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect confidentiality and integrity via unknown vectors related to su...
CVE-2010-3507
Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Live Upgrade...
CVE-2010-3507
CVE-2010-3507 is associated with Solaris Live Upgrade. The connected Oracle Sun Products entry lists CVE-2010-3507 under Solaris with the Live Upgrade component, showing local access required (Local), and impacts on Confidentiality, Integrity, and Availability (Partial/Complete). The vulnerabilit...
CVE-2010-3503
Oracle Solaris 10/OpenSolaris local vulnerability CVE-2010-3503 resides in the su command: when inheriting environment variables, a malloc() may return NULL, and a subsequent strcpy() can dereference it, causing a crash (segmentation fault). Public sources (e.g., exploit/packetstorm references) d...
Oracle Solaris - su Crash
Oracle Solaris - su Crash From http://cvs.opensolaris.org/source/xref/onnv/onnv-gate/usr/src/cmd/su/su.c 521 for j = 0; initenvj != 0; j++ 1 522 if initvar = getenvinitenvj 2 ... 535 else 536 var = char 537 mallocstrleninitenvj 3 538 + strleninitvar 539 + 2; 540 void strcpyvar, initenvj; 4 'su'...
Solaris 10 (x86) : 140861-02 (deprecated)
SunOS 5.10x86: su patch. Date this patch was last updated by Sun : Oct/06/10 This plugin has been deprecated and either replaced with individual 140861 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2018/03/12...
Solaris 10 (sparc) : 143645-16
SunOS 5.10: iSCSI patch. Date this patch was last updated by Sun : May/26/11 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2013/04/30. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...
